Your Privacy Matters at kb77

1 Who We Are

kb77 is an online casino and sports betting platform operating at https://kb77.im, serving players in the Bangladesh market. When this Privacy Policy refers to "kb77", "we", "us", or "our", it refers to the operator of the kb77 platform in its capacity as the data controller — the entity that determines the purposes and means of processing your personal data.

This Privacy Policy applies to all services and features available through the kb77 platform, including but not limited to sports betting, live casino games, slot games, the kb77 Login portal, promotional services, and customer support communications. It applies to data collected online through the platform and through any direct communications you have with our support team.

For all privacy-related queries, requests, or concerns, you may contact us at: [email protected]

2 Data We Collect

kb77 collects personal data in the following categories. We only collect data that is necessary and proportionate to the purposes described in Section 4 of this Policy.

We do not collect special category data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where strictly necessary for age or identity verification purposes and only with your explicit consent.

3 How We Collect Data

kb77 collects personal data through several channels:

• Direct Registration: Information you provide when creating your kb77 account, including your name, email address, date of birth, mobile number, and preferred username and password.
• Deposits & Withdrawals: Payment identifiers and transaction details collected when you make deposits or request withdrawals via bKash, Nagad, Rocket, Upay, Visa, or Mastercard.
• Identity Verification: Documents and information you provide when completing our Know Your Customer (KYC) verification process, which may be required before your first withdrawal or when processing large transactions.
• Platform Usage: Automatically collected technical and behavioural data generated as you navigate the kb77 platform — including pages viewed, games played, bets placed, and session durations — via server logs, cookies, and similar tracking technologies.
• Customer Support: Data you share voluntarily when contacting the kb77 support team via email or any other support communication channel.
• Third-Party Sources: In limited circumstances, kb77 may receive supplementary data from third-party identity verification services, fraud prevention databases, or payment processors to validate the information you have provided or to flag potential risks.

4 Purposes of Processing

kb77 processes your personal data only for clearly defined and legitimate purposes. The table below sets out the primary purposes for which we use your data and the corresponding categories of data involved:

• Account Administration: To create, maintain, and manage your kb77 member account, including processing login requests, updating account preferences, and managing responsible gaming settings such as deposit limits and self-exclusion.
• Payment Processing: To receive deposits and process withdrawal requests to and from your registered payment methods (bKash, Nagad, Rocket, Upay, Visa, Mastercard).
• Identity & Age Verification: To verify that you are at least 21 years of age and that your identity matches the payment methods associated with your account, in compliance with applicable anti-money laundering and responsible gaming obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, bonus abuse, account sharing, and other prohibited conduct as defined in our Terms & Conditions.
• Legal & Regulatory Compliance: To meet our obligations under applicable laws and regulations, including anti-money laundering reporting requirements, and to respond to lawful requests from regulatory or law enforcement authorities.
• Customer Support: To respond to your queries, investigate complaints, and provide effective support in connection with your kb77 account and the services available through the platform.
• Responsible Gaming: To monitor gaming behaviour and identify patterns that may indicate problem gambling activity, enabling us to apply protective measures in accordance with our Responsible Gaming commitments.
• Marketing Communications: To send you promotional offers, bonus notifications, and seasonal promotions — such as those tied to BPL, IPL, Eid, and Pohela Boishakh — only where you have consented to receive such communications. You may withdraw this consent at any time.
• Platform Improvement: To analyse aggregated, anonymised usage data for the purposes of improving the kb77 platform, optimising user experience, and developing new features and game offerings.

5 Legal Basis for Processing

kb77 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform our contract with you — i.e., to operate your kb77 account, process payments, and provide the services you have requested.
• Legal Obligation: Processing that is required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing that serves kb77's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and platform analytics — where these interests are not overridden by your fundamental privacy rights.
• Consent: Processing that is based on your freely given, specific, and informed consent — primarily in the context of marketing communications and optional data collection. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Data Sharing & Third Parties

kb77 does not sell, rent, or trade your personal data to third parties for marketing or commercial exploitation purposes under any circumstances. We may share your data with carefully selected third parties only in the following limited contexts:

• Payment Processors: Your payment details are shared with the relevant payment providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard networks) solely to facilitate the processing of your deposits and withdrawals. These providers operate under their own privacy policies and are independently responsible for data they collect through their own platforms.
• Identity Verification Providers: Where necessary to complete KYC verification, we may share identity data with regulated third-party verification service providers. These providers are contractually bound to process data only for the purpose of verification and in compliance with applicable data protection standards.
• Game Content Providers: Technical session and gameplay data may be shared with licensed game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to the extent necessary to deliver and audit their game content. These studios process game session data under their own licensing agreements.
• Fraud Prevention & AML Services: Certain data points may be shared with third-party fraud detection and anti-money laundering screening services to assess transaction risk and ensure platform integrity.
• Legal & Regulatory Authorities: kb77 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by law, valid legal process, or to protect the rights and safety of the Platform, its members, or third parties.
• Corporate Transactions: In the event of a merger, acquisition, or restructuring of the entity operating kb77, personal data held by the Platform may be transferred to the acquiring or successor entity as part of that transaction, subject to equivalent privacy protections being maintained.

7 Cookies & Tracking Technologies

kb77 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used on the kb77 platform:

• Strictly Necessary Cookies: These cookies are essential for the platform to function correctly. They enable core features such as maintaining your login session, remembering your account preferences, and securing your connection. These cookies cannot be disabled without impairing platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised data about how visitors interact with the kb77 platform — such as which pages are visited most frequently, how long sessions last, and where users navigate after each page. This data is used exclusively to improve the platform's performance and user experience.
• Functional Cookies: These cookies remember choices you have made on the platform — such as your display preferences, language settings, and responsible gaming limit configurations — to provide a more personalised experience on return visits.
• Marketing & Tracking Cookies: Where you have consented, these cookies are used to track your activity on the platform for the purpose of delivering relevant promotional communications and assessing the effectiveness of our marketing campaigns. You may withdraw consent to marketing cookies at any time through your account settings.

You can configure your browser to refuse or delete cookies at any time. However, please be aware that disabling strictly necessary cookies may prevent certain features of the kb77 platform from functioning correctly, including maintaining your authenticated login session.

8 Data Retention

kb77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your membership with kb77 and for a minimum of 5 years following permanent account closure, in line with standard anti-money laundering record-keeping requirements.
• Transaction Records: Deposit, withdrawal, and bet history records are retained for a minimum of 5 years from the date of each transaction to meet financial record-keeping obligations.
• Identity Verification Documents: KYC documents (copies of ID, proof of address) are retained for a minimum of 5 years following the termination of your membership or the last transaction they were used to verify.
• Customer Support Records: Communications with the kb77 support team are retained for a period of 3 years from the date of the interaction, unless the subject matter relates to an ongoing dispute or investigation, in which case records are retained until that matter is fully resolved.
• Marketing Data: Marketing preference data and associated communication records are retained until you withdraw consent, after which they are deleted within 30 days.
• Technical & Log Data: Server logs and technical session data are retained for a maximum of 12 months before being anonymised or deleted.

Upon expiry of the applicable retention period, personal data is either securely deleted or anonymised so that it can no longer be attributed to any identifiable individual.

9 Data Security

kb77 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction:

• SSL/TLS Encryption: All data transmitted between your browser or device and the kb77 platform is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar when using the platform.
• Encrypted Data Storage: Sensitive data held in our databases — including identity verification documents and payment identifiers — is stored in encrypted form using robust encryption standards.
• Password Security: User passwords are stored exclusively in hashed form using modern cryptographic hashing algorithms. kb77 staff cannot read or retrieve your password in plain text under any circumstances.
• Access Controls: Access to personal data within kb77's internal systems is strictly limited to authorised personnel who require that access to perform their specific job functions. All internal access is logged and subject to regular audit.
• Fraud Monitoring: Automated systems continuously monitor account activity for patterns consistent with unauthorised access, account takeover attempts, or suspicious transaction behaviour.
• Incident Response: In the event of a data security incident that poses a material risk to Members, kb77 will take immediate remedial action and notify affected Members and relevant authorities in accordance with applicable incident reporting requirements.

10 Your Rights

As a Member of the kb77 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected]. We will acknowledge your request within 5 business days and provide a substantive response within 30 days.

• Right of Access: You have the right to request a copy of the personal data kb77 holds about you, along with information about how that data is being processed.
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete personal data we hold about you. Some account details can be updated directly through your account settings.
• Right to Erasure ("Right to Be Forgotten"): Subject to applicable legal and regulatory record-keeping obligations, you have the right to request the deletion of your personal data. This right is most commonly exercised in connection with permanent account closure.
• Right to Restriction of Processing: In certain circumstances — for example, if you contest the accuracy of data we hold — you may request that we restrict our processing of that data while the dispute is being resolved.
• Right to Data Portability: Where technically feasible and where processing is based on consent or contractual necessity, you have the right to request that your data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data that is based on legitimate interests, including profiling carried out for fraud detection purposes. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — such as for marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Please note that certain rights are subject to limitations where processing is required by law, necessary for the performance of your contract with kb77, or necessary for the establishment, exercise, or defence of legal claims.

11 Minors & Age Verification

The kb77 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the registration process, and additional verification may be requested at any point during membership.

If kb77 discovers or reasonably suspects that an account has been registered by, or is being used by, an individual under the age of 21, that account will be suspended immediately. Any deposits and any winnings associated with the underage account will be withheld pending investigation and may be forfeited in accordance with our Terms & Conditions and applicable responsible gaming obligations.

If you believe that a minor may have registered on the kb77 platform, please notify us immediately at [email protected] so that we can take prompt action.

12 International Data Transfers

In certain circumstances, personal data processed by kb77 may be transferred to, or accessed by, service providers or technology infrastructure located outside Bangladesh. Such transfers may occur in connection with cloud hosting services, identity verification providers, payment processor networks, or game content delivery systems operated by international studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi.

Where such international transfers occur, kb77 takes reasonable steps to ensure that your personal data receives a level of protection consistent with the standards described in this Privacy Policy. This may include entering into appropriate data processing agreements with the relevant service providers and assessing the data protection standards applicable in the receiving jurisdiction.

By using the kb77 platform and providing your personal data, you acknowledge that your data may be transferred, stored, or processed in jurisdictions outside Bangladesh in the limited circumstances described above.

13 Changes to This Privacy Policy

kb77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or the services available through the platform. When material changes are made, we will notify Members by posting a prominent update notice on the platform and, where reasonably practicable, by sending a notification to the registered email address associated with your account.

The revised Privacy Policy will take effect from the date of publication unless a later effective date is specified. Your continued use of the kb77 platform following publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should cease using the platform and request account closure before the revised Policy takes effect.

The "Last Updated" date displayed at the top of this document reflects the date on which the most recent revision was published. We recommend that you review this Policy periodically to stay informed of any updates.

14 Contact & Data Queries

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data kb77 holds about you, please contact our support team using the details below. We treat all privacy-related enquiries with the highest priority and will respond promptly and thoroughly.

When submitting a data access, rectification, or erasure request, please include your registered email address and a description of the specific data or processing activity your request relates to. We may request proof of identity before processing your request to ensure the security of your account data.